Hacker News new | ask | show | jobs
by codetrotter 763 days ago
But the OpenSSH they have in OpenBSD is maintained in-tree I think. And then they have the portable OpenSSH that they maintain separately for other systems to use. And then changes in either are probably integrated into the other keeping them largely the same.

But there surely are some features in either that are intentionally kept out of the other?
2 comments
throw0101c 763 days ago
> This is a port of OpenBSD's OpenSSH to most Unix-like operating systems, including Linux, OS X and Cygwin. Portable OpenSSH polyfills OpenBSD APIs that are not available elsewhere, adds sshd sandboxing for more operating systems and includes support for OS-native authentication and auditing (e.g. using PAM).

* https://github.com/openssh/openssh-portable

Perhaps see specifically the "openbsd-compat" directory, otherwise I think the source tree is very close the the 'OpenBSD version':

* https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/

link
NekkoDroid 763 days ago
One of these is probably the recently upstream added sd_notify support, as the BSDs currently (or probably ever) dont support systemd.

But the notification mechanism isn't really systemd specific, so maybe they can make use of it somehow for something, dunno.

link
throw0101c 763 days ago
https://github.com/openssh/openssh-portable/commit/08f579231...

?

link
NekkoDroid 763 days ago
Yes, that is what I am talking about. This has no use for it in the in-tree openssh of BSD, so it wouldn't surprise me if this specific patch is omitted from the in-tree variant.
link